dandri/MeshChatX
1
0
Fork 0
mirror of https://git.quad4.io/RNS-Things/MeshChatX.git synced 2026-05-11 07:26:53 +00:00
Code Issues Packages Projects Releases Wiki Activity

ci(setup-trivy): add curl retries for transient 502 errors

Browse Source
This commit is contained in:
Ivan
2026-05-09 19:11:19 -05:00
parent fee9e33562
commit 4349cb9690
1 changed files with 5 additions and 5 deletions
Download Patch File Download Diff File Expand all files Collapse all files
scripts/ci/setup-trivy.sh
+5 -5
View File
@@ -31,8 +31,8 @@ verify_upstream_deb() {
ensure_cosign
export COSIGN_YES="${COSIGN_YES:-true}"
curl -fsSL -o /tmp/trivy_checksums.txt "${TRIVY_RELEASE_BASE}/trivy_${TRIVY_VERSION}_checksums.txt"
curl -fsSL -o /tmp/trivy_checksums.sigstore.json "${TRIVY_RELEASE_BASE}/trivy_${TRIVY_VERSION}_checksums.txt.sigstore.json"
curl -fsSL --retry 5 --retry-delay 2 -o /tmp/trivy_checksums.txt "${TRIVY_RELEASE_BASE}/trivy_${TRIVY_VERSION}_checksums.txt"
curl -fsSL --retry 5 --retry-delay 2 -o /tmp/trivy_checksums.sigstore.json "${TRIVY_RELEASE_BASE}/trivy_${TRIVY_VERSION}_checksums.txt.sigstore.json"
cosign verify-blob /tmp/trivy_checksums.txt --bundle /tmp/trivy_checksums.sigstore.json \
--certificate-identity-regexp="${TRIVY_CERT_IDENTITY_RE}" \
--certificate-oidc-issuer-regexp="${TRIVY_CERT_ISSUER_RE}"
@@ -43,10 +43,10 @@ verify_upstream_deb() {
exit 1
fi
curl -fsSL -o /tmp/trivy.deb "${TRIVY_RELEASE_BASE}/${DEB_BASE}"
curl -fsSL --retry 5 --retry-delay 2 -o /tmp/trivy.deb "${TRIVY_RELEASE_BASE}/${DEB_BASE}"
echo "${EXPECTED_SHA} /tmp/trivy.deb" | sha256sum -c
curl -fsSL -o /tmp/trivy.deb.sigstore.json "${TRIVY_RELEASE_BASE}/${DEB_BASE}.sigstore.json"
curl -fsSL --retry 5 --retry-delay 2 -o /tmp/trivy.deb.sigstore.json "${TRIVY_RELEASE_BASE}/${DEB_BASE}.sigstore.json"
cosign verify-blob /tmp/trivy.deb --bundle /tmp/trivy.deb.sigstore.json \
--certificate-identity-regexp="${TRIVY_CERT_IDENTITY_RE}" \
--certificate-oidc-issuer-regexp="${TRIVY_CERT_ISSUER_RE}"
@@ -59,7 +59,7 @@ if [ -n "${TRIVY_DEB_URL:-}" ]; then
echo "setup-trivy.sh: TRIVY_DEB_URL requires TRIVY_DEB_SHA256" >&2
exit 1
fi
curl -fsSL -o /tmp/trivy.deb "${TRIVY_DEB_URL}"
curl -fsSL --retry 5 --retry-delay 2 -o /tmp/trivy.deb "${TRIVY_DEB_URL}"
echo "${TRIVY_DEB_SHA256} /tmp/trivy.deb" | sha256sum -c
else
arch="$(uname -m)"